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(57) ABSTRACT 

A method of managing a set of clients in a distributed 
computer network having a management server. A given 
client preferably includes a dataless management frame- 
work. According to the method, a proxy object is associated 
to each application instance on a given client. The proxy 
object preferably includes a data set including information 
representing a context of the application instance. The 
application instance is then managed through the proxy 
object directly. 
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PROXY OBJECT FOR MANAGING AN 
APPLICATION INSTANCE ON A DATALESS 
CLIENT MACHINE 

BACKGROUND OF THE INVENTION 

1. Technical Field 

The present invention is directed to managing a large 
distributed computer network. More particularly, the present 
invention is related to the field of application management in 
a large enterprise network. 

2. Description of the Related Art 

Enterprises now desire to place all of their computing 
resources on a computer network. To this end, it is known to 
connect computers in a large, geographically-dispersed net- 
work environment and to manage such an environment in a 
distributed manner. One such management framework, the 
Tivoli Managed Environment™, comprises a server that 
manages a number of nodes, each of which has a local object 
database that stores object data specific to the local node. 
Each managed node typically includes a management 
framework, comprising a number of management routines, 
that is capable of a relatively large number (e.g., hundreds) 
of simultaneous network connections to remote machines. 
The framework manages hundreds of megabytes of local 
storage and can spawn many dozens of simultaneous pro- 
cesses to handle method requests from local or remote users. 
Of these nodes, only a small percentage are file servers, 
name servers, database servers, or anything other than 
end-of-wire or "endpoint" machines. The majority of the 
network machines are simple personal computers (PCs) or 
workstations that see little management activity during a 
normal day. 

Among the many features of the Tivoli ME system is the 
use of a lightweight client framework ("LCF")- The LCF is 
software that runs on an endpoint computer and that allows 
the management system to communicate with and manipu- 
late the client computer. The LCF includes a query agent that 
starts up and executes as needed to respond to management 
queries directed to the node. In the LCF, preferably the 
storage of management data on the client computer is 
substantially eliminated. An LCF-supported client is thus 
sometimes referred to as "dataless" This architecture mini- 
mizes the chance of corruption of management data by 
users. 

Management operations on a dataless client, e.g., install- 
ing new software or checking memory usage, are often 
performed on a machine as a whole. However, there are 
often applications or subsystems running on a machine that 
require a finer granularity of management as combined to 
the overall machine. These applications typically are those 
that have multiple installations or "instances" running inde- 
pendently. An example is a relational database system where 
multiple database instances of the application service dif- 
ferent business applications (e.g., accounting and human 
resources). To manage these applications, it is desirable and 
often necessary to target operations at a specific application 
instance. As noted above, however, to conserve resources, 
the local query agent typically is only started upon receipt of 
the management query. When started, this routine does not 
necessarily know about the different application instances 
that may be executing on the machine, which complicates 
the management operation. 

The present invention addresses this problem. 

BRIEF SUMMARY OF THE INVENTION 

According to the invention, an entity, sometimes referred 
to as a "proxy", is created to represent each instance of an 
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application running on a client. The proxy, which may reside 
anywhere in the distributed network, is the target of man- 
agement operations. It then redirects those operations to the 
appropriate client node. 

5 The proxy preferably comprises a control routine, 
together with a data set describing a context of the applica- 
tion instance. Typical context information includes client 
node identity, installation location (e.g., directory), installa- 
tion identifier (e.g., database server name), administrator 

1Q username/password details, and the like. When a query is 
performed by a management server, the proxy preferably 
relays the query to the client node after augmenting it with 
the appropriate context information. Upon receipt of the 
query at the client, a query agent is started. The context 
information is then used by a local query agent to identify 

15 which of the many installed instances of the application to 
target for the management operation. 

The proxy may also include or use a discovery mecha- 
nism to discover existing application instances on a client 
node. Alternatively, information about application instances 

20 are explicitly registered with the client proxy in a registra- 
tion process. According to the present invention, the proxy 
preferably fully specifies the identity of an application 
instance targeted for a management operation. 
In one aspect, the present invention describes a method of 

25 managing a set of clients in a distributed computer network 
having a management server. A given client preferably 
includes a dataless management framework. According to 
the method, a proxy object is associated to each application 
instance on a given client. The proxy object preferably 

30 includes a data set including information representing a 
context of the application instance. The application instance 
is then managed through the proxy object directly. 
According to -another aspect of the invention, a proxy 

35 object is provided for use in managing an instance of an 
application executing on a client machine. The proxy object 
comprises a data set including information representing a 
context of the application instance, together with a control 
routine. The routine intercepts a query directed to the client 

4Q machine for managing the application, modifies the query 
with the information, and then redirects the modified query 
to the client machine to target management of the applica- 
tion instance directly. 
According to yet another aspect of the invention, a 

45 management framework is provided for use in distributed 
management operations. The framework comprises a man- 
agement server to which a set of clients to be managed are 
connectable and, for each client, a set of proxy objects. As 
noted above, each proxy object is associated with a given 

50 instance of an application to be managed at the client and is 
responsive to management operations initiated at the man- 
agement server for managing the application instance 
directly. 

Thus, it is a more general object of the present invention 
55 to provide a set of proxy objects for managing application 
instances on a dataless client in large managed environment. 
In one embodiment, there is one proxy object per application 
instance. 

Another more general object of this invention is to 
60 provide a finer degree of management control over a client 
machine operating in a distributed computer environment. 

Still another object of the present invention is to provide 
a system that effectively manages multiple application 
instances in a managed environment comprising a set of 
65 dataless clients connected to a management server. 

Hie foregoing has outlined some of the more pertinent 
objects of the present invention. These objects should be 
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construed to be merely illustrative of some of the more Digital UNIX or Windows NT, or a Sun Enterprise 10000 

prominent features and applications of the invention. Many series running Solaris® 7. Of course, other machines and/or 

other beneficial results can be attained by applying the operating systems may be used as well for the server 

disclosed invention in a different manner or modifying the machines. 

invention as will be described. Accordingly, other objects 5 Workstations 16, 17 and 19 are connected directly to the 

and a fuller understanding of the invention may be had by network using known techniques such as Ethernet networks, 

referring to the following Detailed Description of the pre- token ring networks, and the like. Wireless connections may 

ferred embodiment. also be used. Workstations 16, 17 and 19 are preferably 

ddici: nrcrDTDTinM nc tuc no awtmp c IBM-compatible x86 personal computers running IBM 

BRIEF DESCRIPTION OF THE DRAWINGS 10 os/2 <g^ Windows ® 98 or NT®. Alternative Unix based 

For a more complete understanding of the present inven- workstations produced by IBM, Sun, Hewlett-Packard and 

tion and the advantages thereof, reference should be made to otners ma y be uscd as well. In this illustrative example, 

the following Detailed Description taken in connection with workstation 17 serves as a dial-up server for laptop com- 

the accompanying drawings in which: puters 18. This provides convenient access for mobile users. 

FIG. 1 illustrates a simplified diagram showing a large 15 " .™ ^1^7 x86 based machi ?f 

distributed computing enterprise environment in which the such 35 me ™'^® S *" e i * Tl^ 

present invention is implemented; °P eratm e s y stem 88 0S/2 ® ° r Endows® 98. 

HO. 2 is a block diagram of a preferred system manage- Referring now to FIG. 2, each gateway machine, such as 

ment framework illustrating how the framework function- 2B server 14, preferably rar^ a^rver component 22 of a system 

ality is distributed across the gateway and its endpoints management framework. Tie server component 22 is a 

within a managed region; multi-threaded runtime process that compr^s several com- 

r , i . ponents: an object request broker or ORB 21, an autho- 

FIG. 3 is a block diagram of the elements that comprise servicc ^ object location 25 and basic 

the lightweight client framework ( LCF ) chent component object ad Qr „ B0A „ 2? Servef c ent 22 also 

of the system management framework; 25 mdudes an object library 29 PrefcrablVj the 0RB 21 runs 

FIG. 4 illustrates a smaller "workgroup" implementation continuously, separately from the operating system, and 

of the enterprise in which the server and gateway functions communicates with both server and client processes through 

are supported on the same machine; separate inter-process communication (IPC) facilities 30. In 

FIG. 5 is a simplified representation illustrating a set of particular, a secure remote procedure call (RPC) is used to 

proxy objects for use in managing application instances 30 invoke operations on remote objects. Gateway server 14 also 

according to the present invention; includes an operating system 28 and a threads mechanism 

FIG. 6 is a flowchart illustrating a preferred operation of 26. 

a proxy object control routine according to the present The system management framework preferably includes a 

invention. 35 client component 24 supported on each of the endpoint 

machines, such as workstations 19. The client component 24 

DETAILED DESCRIPTION OF THE preferably is "dataless" in the sense that the system man- 

PREFERRED EMBODIMENT agement data is not cached or stored there in a persistent 

Referring now to FIG. 1, the invention is preferably manner. This is a known product called the Tivoli light- 
implemented in a large distributed computer environment 10 40 wight client framework ("LCF") The LCF has two main 
comprising up to thousands of "nodes". The nodes typically as illustrated in FIG. 3: the LCF daemon 24a and an 
are geographically dispersed and the overall environment is application runtime library 246. The LCF daemon 24a is 
said to be "managed" in a distributed manner. Preferably, the responsible for endpoint log-in and for spawning application 
management environment (ME) is broken down logically endpoint executables. Once an executable is spawned, the 
into a series of loosely-connected managed regions (MR), 45 LCF daemon 24a has no further interaction with it. Each 
each with its own management server 12 for managing local executable is linked with the application runtime library 
resources within the MR. The network typically includes 24fe > which handles all further communication with the 
other servers (not shown) for carrying out other distributed gateway. The runtime library includes a query agent that is 
network functions. These include name servers, security started upon receipt of a management query and then is used 
servers, file servers, thread servers, time servers and the like. 50 t0 effectuate a given management operation. 
Multiple servers 12 coordinate activities across the enter- Implementation of the management framework in this 
prise and permit remote site management and operation. "client-server" manner has significant advantages, and it 
Each server 12 serves a number of gateway machines 14, 16 facilitates the connectivity of personal computers into the 
and 17, each of which in turn support a plurality of endpoints managed environment. Using an object-oriented approach, 
18 and 19. In this configuration, gateway 14 also is a server. 55 the system management framework facilitates execution of 
Server 12 preferably coordinates all activity within the MR. system management tasks required to manage the resources 

Servers 12 and 14 provide network resources such as data m the MR. Sucn tasks are quite varied and include, without 
storage space, application services and many other services limitation, file and data distribution, network usage 
known to be provided by servers in a network. Preferably, monitoring, user management, printer or other resource 
the servers 12 and 14 are computers including a IBM 60 configuration management, and the like. 
RS/6000® processor running the AIX operating system, In the large enterprise such as illustrated in FIG. 1, 
preferably version 3.2.5 or greater. Suitable alternative preferably there is one server per MR with some number of 
machines include an IBM-compatible PC x86 or higher gateways. For a workgroup-size installation (e.g., a local 
running Windows NT® or LINUX, a Data General AViion® area network) such as illustrated in FIG. 4, a single server- 
series running DG/UX version 4.2, SCO UnixWare® 2.1 or 65 class machine may be used as the server and gateway, and 
greater, a Hewlett Packard 9000/700 or 800 series running the client machines run the lightweight client framework 
HP UX 9.0 or greater, a Compaq AlphaServer® running (LCF) as previously described. References herein to a dis- 
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tinct server and one or more gateway(s) should thus not be a discovery routine 42 for use in discovering application 

taken by way of limitation, as these elements may be instances on the client machine. The discovery routine is 

combined into a single platform. For intermediate size useful when proxy objects are instantiated prior to their 

installations, the MR grows breadth-wise with additional association with given application instances. A given appli- 

gateways being used to balance the load of the end points. 5 cation instance also may be located by a proxy object by 

The server is the top-level authority over all gateways and having the proxy object call a separate discovery 

endpoints. In particular, the server maintains an endpoint mechanism, which then returns the results of the discovery 

list, which keeps track of every endpoint in a managed process. 

region. The list preferably contains all information neces- Thus, assume that a given client machine to be managed 
sary to uniquely identify and manage each endpoint 10 by the distributed framework includes Appl 1 (Lotus Notes), 
including, without limitation, such information as name, Appl 2 (Oracle) for use by the enterprise's accounting 
location, and machine type. The server also maintains the department, another instance of Appl 2, for use by the 
mapping between each endpoint and gateway, and this enterprise's human resources department, and Appl x 
mapping is preferably dynamic. As noted above, there are ( other )- According to the invention, there would be four (4) 
one or more gateways per managed region. Preferably, a P rox y objects: one for managing Appl 1, one for managing 
gateway is a fully-managed node that has been configured to me punting department s Appl 2 instance, one for man- 
operate a gateway. As endpoints log in, the gateway builds m *e human resources department s Appl 2 instance, 
j ■ * v . * j • . ni 7 , j - • and one for managing Appl x. As noted above, each or the 
an endpoint list for its endpoints. The gateway s duties , . t * ui ■ i j a * * A. * ■ i a 

r i i ■ i , *i ^ e , . ~\ . . proxy obiects preferably mcludes a data set that includes 

preferably include: the setting for endpoint log-in requeste context-specific information for the application instance, 

the setting for endpomt update requests, and (its main ta.sk) 2Q ^ data xi typically comprises client node idenlitV) an 

acting as a gateway for method invocations on endpoints. installation location (e.g., directory), an installation identi- 

The above -described framework is a known end-to-end, for (e.g., database server name), and optional administrator 

cross-platform network management scheme that provides a username/password details. Of course, one of ordinary skill 

core set of management services and various management in the art will appreciate that other local contextual infor- 

applicalions. As already noted, given management opera- 25 mation and/or types may be incorporated into the data set. 

tions in the managed environment may be carried out by FIG. 6 is a flowchart of a preferred operating routine of 

"agents". An agent is a specialized low-impact software the proxy object. The routine begins at step 50 by associating 

module or routine that is deployed to a client node and that a proxy object to a given application instance. As noted 

is useful for executing some local management task. Thus, above, prior to this step, a discovery operation may have 

for example, the management server may include a discov- 30 been carried out to identify the application instance. At step 

ery mechanism that provides automatic discovery of man- 52, the proxy object waits for a given management operation 

aged nodes, gateways and connected managed regions. The or query from the management server (or some other 

mechanism deploys the software agents, which identify source). For the purposes of illustration, the remainder of the 

information about managed devices and make it available to discussion shall describe proxy object operation in the 

a network managing system. A representative discovery 35 context of a management query, although one of ordinary 

mechanism of this type is described in more detail in U.S. skill in the art will appreciate that the operation described 

Ser. No. 09/089,961, titled "System, Method And Computer below is also used for any given management operation 

Program Product For Discovery In A Distributed Computing protocol. 

Environment/' now pending. That application is assigned to A test is performed at step 54 to determine whether a 

the assignee of the present invention and is incorporated 40 query has been received. If not, the routine returns to step 52. 

herein by reference. If, however, a query has been received, the routine continues 

Referring now to FIG. 5, one of ordinary skill will at step 58 to intercept and parse the request. At step 60, the 
appreciate that a given client machine 30 supports a plurality control routine modifies the query to reflect given context 
of software applications 32a-32w. Moreover, a set of one or information in the object's data set. This operation provides 
more instances 34a-34/i of a given software application 32 45 a mucn finer degree of control over the management opera- 
may be executing on the client machine at any one time. tion. Thus, for example, if the original query was "how big 
According to the present invention, a proxy object 36a-36« is my Oracle database", the modified query is "how big is 
is associated with a given application instance for the may Oracle database being operated by the accounting 
purpose of managing that instance directly. Each proxy department" or the like. As can be seen, the application- 
object 36 comprises two main elements: a data set 38, and 50 specific query is modified at step 60 to become application 
a control routine 40. The data set includes information instance-specific. As used herein, a query may be "modified" 
representing a given context of the application instance. The by augmenting the query (as described) by substituting an 
control routine, as will be described below, is used to alternate query, by processing the query (e.g., to add a 
intercept a management query targeted to the application security token), or by some combination of the above, 
generally and to redirect the query to the given application 55 At step 62, the control routine of the proxy object 
instance managed by the proxy object. The redirected query relaunches the modified query to the client machine. The 
may differ from the original query by including context- client machine receives the query at step 64. At step 66, a 
specific information unique to the application instance. local query agent is launched. This is a conventional opera - 

Thus, according to the invention, a given client machine tion in the LCF framework described above. At step 68, the 
supports at least one application to be managed. As an 60 local agent parses the received query and performs the 
application instance is started, a corresponding proxy object requested operation. At step 70, the results are returned back 
is associated therewith. The proxy object is then used to to the proxy object. If no further processing is required, the 
manage that application instance directly. The set of proxy proxy object then returns the results of the query back to the 
objects associated with a given client machine application requesting server. This is step 72. This completes the pro- 
may be supported anywhere in the managed network (e.g., 65 cessing. 

at a management server, at a gateway, or at another location). As can be seen, the proxy object is used to manage the 

As also seen in FIG. 5, a given proxy object may also include application instance directly. This operation provides sig- 
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nificant advantages over the prior art, wherein management including information representing a context of the 

queries directed toward a given application cannot be spe- application instance, wherein a proxy object is uniquely 

cifically directed to a given application instance (e.g., associated with an application instance, and an appli- 

because the local query agent in the dataless client does not cation instance is uniquely associated with a proxy 

start until receipt of the query). In addition, use of the proxy 5 object; and 

object to manage a given application instance enables finer managing the application instance directly through the 

granularity of access control. In particular, a server man- proxy object. 

agement operation may be directed to a particular applica- 2. The method as described in claim 1 wherein the given 

tion (or application instance) without exposing the remain- c ii ent supports a dataless management framework, 

der of the client node to the operation. 10 3. The method as described in claim 2 wherein the 

One of ordinary skill will appreciate that the control dataless management framework includes a local agent that 

routine of a given proxy object is a computer program is controlled by the proxy object to manage the application 

executable by a processor on a given machine. One of the instance. 

preferred implementations of the invention is as a set of 4. The method as described in claim 1 wherein the data set 

instructions in a code module resident in the random access 15 includes information identifying a client node, 

memory of a computer. Until required by the computer, the 5. The method as described in claim 1 wherein the data set 

set of instructions may be stored in another computer includes information identifying a directory where the appli- 

memory, for example, in a hard disk drive, or in a removable cation instance is installed. 

memory such as an optical disk (for eventual use in a CD 6. The method as described in claim 1 wherein the data set 

ROM) or floppy disk (for eventual use in a floppy disk 20 includes information identifying a name of a resource where 

drive), or even downloaded via the Internet. the application instance is installed. 

The objects of this invention are achieved in a large 7. The method as described in claim 1 wherein the 

distributed enterprise that includes computing resources application instance is discovered by the proxy object, 

organized into one or more managed regions, each region 8. The method as described in claim 1 further including 

being managed by a management server servicing one or 25 the step of discovering the application instance prior to 

more gateway machines, with each gateway machine ser- associating the proxy object. 

vicing a plurality of endpoint machines. As has been illus- 9. The method as described in claim 1 wherein the proxy 

trated and described, a system management framework is object is managed by the management server, 

preferably "distributed" on the gateway machines and the 10. A method of managing a set of clients in a distributed 

one or more endpoint machines to carry out system man- 30 computer network having a management server, comprising 

agement tasks. Although the above environment is preferred, the steps of: 

one of ordinary skill will appreciate that the inventive for each client, establishing a set of proxy objects, 

concepts may be implemented in smaller distributed client wherein each proxy object is uniquely associated with 

server network environments. Thus, the invention should not a given instance of an application to be managed, and 

be construed to be limited to a particular large scale, 35 a given instance of an application is uniquely associ- 

distributed computing environment as described in the pre- ated with a proxy object; and 

ferred embodiment. responsive to management operations initiated at the 

In addition, although the various methods described are management server, managing a given client using the 

conveniently implemented in a general purpose computer set 0 f proxy objects established for that client, 

selectively activated or reconfigured by software, one of n. The method as described in claim 10 wherein the 

ordinary skill in the art would also recognize that such given client supports a dataless management framework, 

methods may be carried out in hardware, in firmware, or in 12. The method as described in claim 11 wherein the 

more specialized apparatus constructed to perform the dataless management framework includes a local agent that 

required method steps. ^ is controlled by the set of proxy objects for the given client. 

Further, although the invention has been described in 13. The method as described in claim 10 wherein each 

terms of a preferred embodiment in a specific network proxy object includes a data set representing a context of the 

environment, those skilled in the art will recognize that the application instance. 

invention can be practiced, with modification, in other and 14. The method as described in claim 13 wherein the data 

different network architectures with the spirit and scope of 5Q set comprises a client node identity, an installation location, 

the appended claims. and an installation identifier. 

One of ordinary skill will appreciate that the concept of I 5 Th e method as described in claim 10 further including 

using a proxy object to manage an application instance the step of discovering the given instance of an application, 

according to the present invention may be extended for use 16- The method as described in claim 10 further including 

in managing multiple resources on the client machine. Thus, 55 the step of registering the given instance of an application 

a given proxy object may be manage a first resource, while with the proxy object. 

another proxy object manages a second resource, and so 17. Aproxy object for use in managing an instance of an 

forth. application executing on a client machine, comprising: 

Having thus described my invention, what I claim as new a data set including information representing a context of 

and desire to secure by letters patent is set forth in the 60 the application instance, wherein a proxy object is 

following claims: uniquely associated with the instance of the 

I claim: application, and the instance of the application is 

1. A method of managing a set of clients in a distributed uniquely associated with a proxy object; and 

computer network having a management server, comprising a control routine (a) for intercepting a query directed to 

the steps of: 65 the client machine for managing the application, (b) for 

associating a proxy object to each application instance on modifying the query as a function of the information; 

a given client, the proxy object including a data set and (c) for redirecting the modified query to the client 
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machine to target management of the application 
instance directly. 

18. The proxy object as described in claim 17 further 
including a routine for discovering application instances 
executing on the client machine. 

19. The proxy object as described in claim 17 wherein the 
data set includes information identifying a client node. 

20. The proxy object as described in claim 17 wherein the 
data set includes information identifying a directory where 
the application instance is installed. 

21. The proxy object as described in claim 17 wherein the 
data set includes information identifying a name of a 
resource where the application instance is installed. 

22. A computer program product in a computer-readable 
medium and executable on a given computer for use in 
managing an instance of an application executing on a client 
machine, comprising: 

means for intercepting a query directed to the client 
machine at a proxy object for managing the instance of 
the application, wherein a proxy object is uniquely 20 
associated with the instance of the application, and the 
instance of the application is uniquely associated with 
a proxy object; 
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means for modifying the query as a function of informa- 
tion derived from a data set, the data set including 
information representing a context of the instance of 
the application; and 

means for redirecting the modified query to the client 
machine to target management of the instance of the 
application directly. 

23. A framework for managing a set of clients, compris- 
ing: 

a management server to which the set of clients are 
connectable; and 

for each client, a set of proxy objects, wherein each proxy 
object is uniquely associated with a given instance of 
an application to be managed at the client and is 
responsive to management operations initiated at the 
management server for managing the given instance of 
the application directly, and wherein the given instance 
of the application is uniquely associated with a proxy 
object. 
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